From a09e396202cbdf59be624bcb81b8eeb707e53d41 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 24 Mar 2025 07:07:18 +0000
Subject: [PATCH] fix: package.json & package-lock.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-UNDICI-8641354
---
 package-lock.json | 19 ++++++++++---------
 package.json      |  2 +-
 2 files changed, 11 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c528bb4..c730cbb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20,7 +20,7 @@
         "@jambonz/lamejs": "^1.2.2",
         "@jambonz/mw-registrar": "^0.2.7",
         "@jambonz/realtimedb-helpers": "^0.8.13",
-        "@jambonz/speech-utils": "^0.2.3",
+        "@jambonz/speech-utils": "^0.2.4",
         "@jambonz/time-series": "^0.2.8",
         "@jambonz/verb-specifications": "^0.0.72",
         "@soniox/soniox-node": "^1.2.2",
@@ -4130,9 +4130,9 @@
       }
     },
     "node_modules/@jambonz/speech-utils": {
-      "version": "0.2.3",
-      "resolved": "https://registry.npmjs.org/@jambonz/speech-utils/-/speech-utils-0.2.3.tgz",
-      "integrity": "sha512-ffx0TYggGDeEEB5yZ9y+BkF6dtDmKvCEgyK0lmzjkRQ2h3xaIWao3c5VCU9WXhKb+d2o6mLL06GebBMdzWIGhg==",
+      "version": "0.2.4",
+      "resolved": "https://registry.npmjs.org/@jambonz/speech-utils/-/speech-utils-0.2.4.tgz",
+      "integrity": "sha512-NlIaYCz0ZYRclDzluCgcfMIRAsWyb88ZgymFVb9rqyg6GEyFYWk28+S0/qDPlXeslRLoIFiJzmmiQUii+j8HSw==",
       "license": "MIT",
       "dependencies": {
         "@aws-sdk/client-polly": "^3.496.0",
@@ -4148,7 +4148,7 @@
         "ibm-watson": "^8.0.0",
         "microsoft-cognitiveservices-speech-sdk": "1.38.0",
         "openai": "^4.25.0",
-        "undici": "^6.4.0"
+        "undici": "^7.5.0"
       }
     },
     "node_modules/@jambonz/speech-utils/node_modules/@types/node": {
@@ -11781,11 +11781,12 @@
       }
     },
     "node_modules/undici": {
-      "version": "6.11.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-6.11.1.tgz",
-      "integrity": "sha512-KyhzaLJnV1qa3BSHdj4AZ2ndqI0QWPxYzaIOio0WzcEJB9gvuysprJSLtpvc2D9mhR9jPDUk7xlJlZbH2KR5iw==",
+      "version": "7.5.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.5.0.tgz",
+      "integrity": "sha512-NFQG741e8mJ0fLQk90xKxFdaSM7z4+IQpAgsFI36bCDY9Z2+aXXZjVy2uUksMouWfMI9+w5ejOq5zYYTBCQJDQ==",
+      "license": "MIT",
       "engines": {
-        "node": ">=18.0"
+        "node": ">=20.18.1"
       }
     },
     "node_modules/undici-types": {
diff --git a/package.json b/package.json
index 91911fe..d79d29b 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "@jambonz/lamejs": "^1.2.2",
     "@jambonz/mw-registrar": "^0.2.7",
     "@jambonz/realtimedb-helpers": "^0.8.13",
-    "@jambonz/speech-utils": "^0.2.3",
+    "@jambonz/speech-utils": "^0.2.4",
     "@jambonz/time-series": "^0.2.8",
     "@jambonz/verb-specifications": "^0.0.72",
     "@soniox/soniox-node": "^1.2.2",